Sector

E-commerce

8,572 domains tracked. 28.9% at DMARC enforcement (p=reject or p=quarantine), backed by 2,477 enforced domains.

Domains tracked
8K+
8,572
DMARC enforcement
28.9%
p=reject + p=quarantine
Avg posture score
42.2
of 100
A-grade domains
37
2 A+ · 35 A

Authentication posture

per protocol

DMARC

policy enforcement: 28.9%
reject
13.7%
quarantine
15.2%
none
37.8%
missing
33.4%

SPF

pass rate: 74.4%
0
pass
74.4%
warn
2.4%
fail
23.1%
not found
0.0%

DKIM

pass rate: 50.7%
pass
50.7%
warn
0.1%
fail
49.1%
not found
0.1%

MTA-STS

pass rate: 0.6%
pass
0.6%
warn
0.5%
fail
98.5%
not found
0.4%

TLS-RPT

pass rate: 1.2%
pass
1.2%
warn
22.7%
fail
75.7%
not found
0.4%

BIMI

pass rate: 1.5%
pass
1.5%
warn
0.3%
fail
97.8%
not found
0.4%

Top performers

20 of 8,572 tracked
#DomainScoreGrade
1boarderie.com97A+
2dreams.co.uk95A+
3coinmotion.com93A
4ctrader.com93A
5americasbest.com92A
6atgtickets.com92A
7dubaiparksandresorts.com92A
8bigbasket.com90A
9brandonhirestation.com90A
10childrensalon.com90A
11childrensalonoutlet.com90A
12collectionsetc.com90A
13featherandblack.com90A
14gorjana.com90A
15alphalion.com89A
16christmascentral.com89A
17curvy.com.au89A
18eldorado.gg89A
19geoportail.lu89A
20hollowsocks.com89A

How this is measured

Each tracked domain is scanned for SPF, DKIM, DMARC, MTA-STS, TLS-RPT, and BIMI. Result statuses (pass / fail / warn / not-found) and DMARC policy values are aggregated into this page nightly. The top performers list is capped at 20. The full corpus is much larger and is not enumerated publicly.

Data provenance

  • Scanner — Authex Labs public scanner (DNS, RFC-compliant)
  • Refreshed — daily at 04:05 UTC
  • Last seen 8 May 2026